fix ids
This commit is contained in:
@@ -4,7 +4,7 @@ let
|
|||||||
in
|
in
|
||||||
{
|
{
|
||||||
options = {
|
options = {
|
||||||
ids.uids = lib.mkOption {
|
container-ids.uids = lib.mkOption {
|
||||||
internal = true;
|
internal = true;
|
||||||
description = lib.mdDoc ''
|
description = lib.mdDoc ''
|
||||||
The user IDs used in NixOS.
|
The user IDs used in NixOS.
|
||||||
@@ -12,7 +12,7 @@ in
|
|||||||
type = types.attrsOf types.int;
|
type = types.attrsOf types.int;
|
||||||
};
|
};
|
||||||
|
|
||||||
ids.gids = lib.mkOption {
|
container-ids.gids = lib.mkOption {
|
||||||
internal = true;
|
internal = true;
|
||||||
description = lib.mdDoc ''
|
description = lib.mdDoc ''
|
||||||
The group IDs used in NixOS.
|
The group IDs used in NixOS.
|
||||||
@@ -21,7 +21,7 @@ in
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
config = {
|
config = {
|
||||||
ids = {
|
container-ids = {
|
||||||
uids = {
|
uids = {
|
||||||
unbound = 10001;
|
unbound = 10001;
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -133,10 +133,10 @@ in {
|
|||||||
users.users.unbound = {
|
users.users.unbound = {
|
||||||
group = "unbound";
|
group = "unbound";
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
uid = config.ids.uids.unbound;
|
uid = config.container-ids.uids.unbound;
|
||||||
};
|
};
|
||||||
users.groups.unbound = {
|
users.groups.unbound = {
|
||||||
gid = config.ids.gids.unbound;
|
gid = config.container-ids.gids.unbound;
|
||||||
};
|
};
|
||||||
|
|
||||||
security.acme.certs."${domain}" = {
|
security.acme.certs."${domain}" = {
|
||||||
@@ -175,10 +175,10 @@ in {
|
|||||||
users.users.unbound = {
|
users.users.unbound = {
|
||||||
group = "unbound";
|
group = "unbound";
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
uid = config.ids.uids.unbound;
|
uid = config.container-ids.uids.unbound;
|
||||||
};
|
};
|
||||||
users.groups.unbound = {
|
users.groups.unbound = {
|
||||||
gid = config.ids.gids.unbound;
|
gid = config.container-ids.gids.unbound;
|
||||||
};
|
};
|
||||||
services.unbound = {
|
services.unbound = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|||||||
Reference in New Issue
Block a user